Vulnerability Bulletins

CVE-2025-25231

   
Affected software OMNISSA
 
Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-25231